IT Auditor - International bank

Job summary

The IT Lead Auditor performs preliminary assessments of internal control frameworks and conducts independent testing to meet audit objectives. They are responsible for drafting final reports, identifying root causes of weaknesses, and supervising junior auditors.

Job details

IT Lead Auditor This is for one of the largest International Banks in the world. Nearly 8,600 employees across Europe, the Americas, Asia-Pacific, the Middle East and North Africa support the Bank's clients, meeting their financial needs throughout the world. They offer its large corporate and institutional clients a range of products and services in capital markets activities, investment banking, structured finance, commercial banking and international trade. The Bank is a pioneer in the area of climate finance, and is currently a market leader in this segment with a complete offer for all its clients. We are currently looking for an IT Auditor. Title: IT Lead Auditor Location: Montreal Work model: Hybrid, 2 days remote work allowed, in-office to start for training Type of position: Full time, permanent OR contract-to permanent Salary: 120k + 10% bonus + 4 weeks vacation. They offer a great benefits package. RRSP matching, you contribute 2% and they contribute 8%. Job summary The Senior Auditor performs a preliminary assessment of the audited activity and its internal control framework. He/she performs independent testing and analysis on specific controls in order to meet the audit’s objectives. He/she also contributes to drafting the debriefing presentation and the final report sent to Management. Depending on the assignment, Senior Auditors may have to directly supervise one or several Auditors and may act as deputy to the Lead Auditor. The Senior Auditor may either work independently or supervise one or several auditors. I – Conduct of assignment - To independently carry out audit planning and fieldwork, including: - A preliminary assessment of the audited activity highlighting the related risks and controls - Interviews, testing and analysis of the results of the controls planned in the audit program - Assessing controls for compliance with regulations, regulatory guidance including but not limited to Federal Financial Institutions Examination Council (FFIEC) IT Examination Booklets, NY Department of Financial Services (DFS) 500, DFS 504, Gramm–Leach–Bliley Act (GLBA), National Institute of Standards and Technology (NIST), Control Objectives for Information and Related Technology (COBIT) etc. - Assessing processes and controls within core IT infrastructure, IT operations, cybersecurity, business continuity planning and IT disaster recovery, business applications, data governance and management. - Assessing control design, effectiveness and sustainability - To document clearly and precisely in test sheets the controls performed and the conclusions reached - To communicate succinctly and precisely in verbal and written communications - To identify and report on strengths and weaknesses of the audited areas, to analyse the root causes and consequences of the identified weaknesses, to formalise possible remediation and recommendations to address the findings and to conclude on the effectiveness and efficiency of the control set-up and business practices - To present audit conclusions to IGE management and to the management of the audited unit (debriefing presentation, final audit report, etc.) - To keep his/her management informed of the progress on the audit work assigned, and to escalate any issue that may impact or delay the audit’s execution or to raise any other relevant information on the assigned audit and the risk and control environment - To proactively conduct recommendations follow-ups to monitor whether adequate corrective actions have been taken prior to closing any recommendations - To ensure proper archiving of any supporting documentation, audit evidence and deliverables. - To demonstrate accountability and ownership for the work assigned Supplementary Information Team management - Training the Auditors on the audit techniques and expected deliverables - Reviewing the work performed by the auditor to ensure that the test results and the findings are adequately documented and the recommendations are relevant - Providing regular feedbacks to the Auditor and contributing to the definition of objectives and to the end of assignment assessment related to the team allocated during assignment - Ensuring collaborative and productive relationships within the team and good coordination throughout the International Network and with auditees IGE Continuous Improvement Program / Transversal topics - Prepares or updates audit guides, scorecards or training materials related to specific activities based on existing knowledge, documentation, interviews, etc. - Monitors the implementation of recommendations issued - Builds and shares knowledge (e.g. through contributing to SynerGIA, delivering training or taking part in various Methods and Support workstreams or assignments) - Participate in one or several knowledge communities within IGE Management and Reporting There will be a dual line of reporting: - Hierarchical reporting line to the Team Lead of IGE team - Functional reporting line to the Americas IT Audit Supervisor Role specific requirements This role may require business travels in any relevant locations to conduct the assigned audits, for periods up to several consecutive weeks. Experience Required 3-5 years’ experience in audit (internal / external) or banking organization or IT Previous experience in a bank, Fintech or large corporation. Academic qualification / Speciality Bachelor or Masters’ degree in Information Technology, business, finance, math, engineering or related field CISA Certification OR CISSP preferred but not required Required skills Organization, efficiency, results-driven, analytical skills Project management (e.g. work organization, time planning, feedback, communication) Verbal and written communication skills in English required (you will need to service Anglophone clients and work with Anglophone colleagues) - French is considered a strong asset Autonomy and Leadership Self-confidence, ability to defend own findings and conclusions, ability to cope with stress Accuracy and reliability Technical skills required Auditing techniques Understanding of the risks generated by banking / securities activities Specific skills/knowledge on IT and IT risks Ability to perform data analytics using spreadsheets, databases, Python, PowerBI Familiarity with commonly used tools such as ServiceNow, vulnerability scanners and penetration testing tools etc

What you’ll do

The IT Lead Auditor performs preliminary assessments of internal control frameworks and conducts independent testing to meet audit objectives. They are responsible for drafting final reports, identifying root causes of weaknesses, and supervising junior auditors.

Requirements

Requires 3-5 years of experience in audit or banking, with a degree in IT, business, finance, or engineering. Proficiency in English is required, and CISA or CISSP certifications are preferred.

Benefits

• 10% Bonus • 4 Weeks Vacation • RRSP Matching

Listed skills

• Leadership · Preferred
• Project management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• IT Auditing
• Risk Assessment
• Cybersecurity
• Internal Controls
• Data Analytics
• Project Management
• English Communication
• Leadership
• Business Continuity Planning
• IT Disaster Recovery
• Data Governance
• Compliance Testing

Job areas

• Finance & Accounting
• Technology
• Consulting
• Data & Analytics
• Management & Leadership